How to fix EUVD-2025-19867?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Is Meac300 Fnade4 Firmware affected by EUVD-2025-19867?

CVE-2025-27461 presents notable security risk, a missing authorization vulnerability rated CVSS 7.6. Attackers could bypass security controls to gain unauthorized access to protected resources and sensitive data.

EUVD-2025-19867

| CVE-2025-27461 HIGH

2025-07-03 [email protected]

7.6

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 16, 2026 - 02:12 vuln.today

EUVD ID Assigned

Mar 16, 2026 - 02:12 euvd

EUVD-2025-19867

CVE Published

Jul 03, 2025 - 12:15 nvd

HIGH 7.6

Description

During startup, the device automatically logs in the EPC2 Windows user without requesting a password.

Analysis

During startup, the device automatically logs in the EPC2 Windows user without requesting a password.

Technical Context

This vulnerability is classified as Missing Authorization (CWE-862).

Affected Products

Affected products: Endress Meac300-Fnade4 Firmware

Remediation

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.1

CVSS: +38

POC: 0

EUVD-2025-19867 vulnerability details – vuln.today

Back

EUVD-2025-19867

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

EUVD-2025-19867

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code